Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42a3e67d-cd98-3451-9179-5a0fb330f4c6.roa
File: 42a3e67d-cd98-3451-9179-5a0fb330f4c6.roa (raw, json)
Hash identifier: XgIthT8t9Qdii+H3TBvCRPB3nmOR3vDznS1p305voQ4=
Subject key identifier: 05:74:B3:FB:44:38:BE:DB:94:FA:4C:96:B5:6C:55:EA:13:E9:60:68
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404628D0DF59E624267FAA4900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42a3e67d-cd98-3451-9179-5a0fb330f4c6.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.34.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:28:d0:df:59:e6:24:26:7f:aa:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=894b662a-6a39-4aaf-accc-17e500b7d5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:49:91:a4:b5:cf:e8:2e:6a:06:a7:52:52:a5:
fd:2f:04:bd:ce:ea:31:de:5e:44:07:ba:da:a8:f7:
74:56:b1:cb:57:1f:c9:cb:de:94:80:5e:29:36:74:
db:39:93:56:12:47:c0:84:36:98:c5:82:8d:5c:00:
71:d8:1c:28:33:54:3c:44:54:b0:17:82:57:24:b0:
8a:4a:38:46:e9:5f:4c:38:ad:b1:b7:a6:ee:05:53:
91:41:bc:cb:3a:01:24:77:00:2a:54:cf:e1:56:d1:
5c:b3:7c:b5:8a:9e:d7:f4:9a:94:71:e5:22:27:c6:
2e:eb:8b:2b:9d:bc:24:c2:80:f1:3f:74:d9:5d:65:
af:e7:31:1f:a5:b8:db:f0:97:e9:2c:25:4f:45:b2:
14:2e:19:80:88:eb:54:91:7b:7b:81:56:90:34:34:
b7:75:86:10:82:cd:a0:fb:fe:44:62:4e:c1:14:63:
45:2d:40:ec:b7:72:bb:9b:76:6a:3e:64:df:3b:0e:
b6:bc:65:7d:b8:ae:db:9a:6f:9b:a9:49:e5:d4:b4:
9b:6e:49:20:85:61:97:9e:1d:4c:61:80:eb:ca:5f:
bd:ac:c6:01:7f:f0:6c:fb:61:c8:53:38:33:81:af:
50:ea:70:f7:bd:7c:ab:7a:cb:d7:6b:28:4a:d1:0f:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:74:B3:FB:44:38:BE:DB:94:FA:4C:96:B5:6C:55:EA:13:E9:60:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42a3e67d-cd98-3451-9179-5a0fb330f4c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.34.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:48:a2:8d:a5:09:49:27:5e:b6:56:09:6b:f6:5a:1b:79:a1:
21:06:a2:47:cb:01:99:2b:45:34:93:87:42:1d:8f:4a:34:4a:
23:27:16:2c:d3:67:40:d0:39:16:76:2c:20:4e:63:6e:03:fa:
27:cd:3a:a7:e5:21:a7:a6:cb:03:5b:cf:ec:43:81:9d:2b:e8:
b5:f4:12:32:84:6f:4f:30:8d:22:de:4b:e2:e4:65:a9:88:08:
81:38:32:96:86:ce:04:df:22:52:01:38:a2:f6:61:15:17:41:
9a:2f:c6:b7:e2:50:af:79:7e:72:69:a4:b6:4d:93:5d:52:75:
b0:c1:41:6a:9c:da:01:33:9b:6b:b1:28:8b:b9:57:6a:6d:32:
66:7a:ab:52:8e:99:71:2d:a4:7a:89:2a:e8:db:03:8a:ec:2a:
ad:c3:a9:a9:19:07:5f:36:cf:3d:3b:6b:6e:d1:9f:8c:22:dd:
19:ae:3e:1d:67:46:ba:44:3f:b3:26:ba:21:4c:27:6a:8d:c7:
37:2c:14:45:01:1e:3d:f5:d6:ed:0f:34:67:7b:be:c8:46:ac:
53:47:5f:5b:4f:f3:23:25:08:d9:43:f9:a6:80:e3:11:ab:f0:
70:71:1c:9b:a2:2f:02:2e:9e:11:e5:eb:a0:57:41:4a:0a:24:
e9:93:11:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:02:16 2025 by rpki-client